22 Aug
2015
22 Aug
'15
6:18 a.m.
Hi,
I have configured and working wifi with eap-tls authentication. I want to use another root ca, so I did the following steps.
yep - but if you are making new CAs and addign them to clients, you ALSO have to re-configure your FreeRADIUS server to use that new CA. you can see in your logs: Sat Aug 22 12:05:05 2015 : Auth: Login incorrect (TLS Alert read:fatal:unknown CA): [selen.kjonca] (from client ni port 2 cli 00-08-22-4F-62-54) Sat Aug 22 12:05:05 2015 : Info: Using Post-Auth-Type REJECT (and plenty of other 'Unknown CA' messages) alan